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1.A network administrator needs to implement a service that enables granular control of IOS commands 
that can be executed. Which AAA authentication method should be selected? 

A. TACACS+ 

B. RADIUS 

C. Windows Active Directory 

D. Generic LDAP 
Answer: A 



2.An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory 
user groups? 

A. member of 

B. group 

C. class 

D. person 
Answer: A 



3. Cisco 802. 1X phasing enables flexible deployments through the use of open, low-impact, and closed 
modes. What is a unique characteristic of the most secure mode? 

A. Granular ACLs applied prior to authentication 

B. Per user dACLs applied after successful authentication O 

C. Only EAPoL traffic allowed prior to authentication 

D. Adjustable 802. 1X timers to enable successful authentication 
Answer: C 

4. A network administrator must enable which protocol extension to utilize EAP-Chaining? 

A. EAP-FAST 

B. EAP-TLS 

C. MSCHAPv2 

D. PEAP 
Answer: A 



5. In the command 'aaa authentication default group tacacs local', how is the word 'default' defined? 

A. Command set 

B. Group name 

C. Method list 

D. Login type 
Answer: C 
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